$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: kU4YTbxO4fVy32Ve32GJWK6LMcfo+IX/at6gstsYD1Y= Subject key identifier: 69:07:13:13:81:A2:05:70:04:1E:FB:AB:5D:7D:17:FF:FE:53:DC:E2 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 3AE3107D50A12C92C9370419060E90844C1E825F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: A8 Signing time: Sat 10 May 2025 00:42:05 +0000 Manifest this update: Sat 10 May 2025 00:37:05 +0000 Manifest next update: Tue 13 May 2025 01:06:05 +0000 Files and hashes: 1: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: qnxApJd2aG2dSbD+ZjCVCGeuWegl0xuL+c/J6a+U/Ac=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) 4: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e3:10:7d:50:a1:2c:92:c9:37:04:19:06:0e:90:84:4c:1e:82:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: May 10 00:37:05 2025 GMT Not After : May 13 01:06:05 2025 GMT Subject: CN=6907131381A20570041EFBAB5D7D17FFFE53DCE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e3:cd:21:e9:79:fc:14:71:b9:2c:6c:6f:9f: d1:0a:9b:6f:e6:6e:44:a9:c0:e8:14:72:43:fd:ad: 79:c7:23:8d:8a:64:b9:81:5f:f4:26:76:8d:1e:89: 41:5f:20:a4:75:b7:b6:25:6e:99:3e:4b:ef:8d:3a: 39:f1:1b:6e:8c:02:0a:e0:1d:01:58:e5:7c:74:bb: 01:7f:7e:d1:7d:36:d6:1b:8d:d2:37:cc:fa:aa:0e: 39:af:d6:2b:85:62:f1:a1:3d:2c:35:0c:ee:c7:4b: ba:7b:de:b1:10:8e:e0:73:ea:8d:c1:cf:ca:f3:68: 22:29:7c:c7:4c:2e:1c:31:b1:64:fe:b1:7e:b3:2b: 2e:cf:15:ab:9f:38:5a:70:a9:93:8a:0b:3d:e5:d5: d7:e8:18:d1:19:f2:00:b2:c8:52:c9:2a:b4:db:1e: c6:85:18:5f:30:f3:4b:71:5b:72:7b:b5:81:e3:43: ca:5b:1f:92:ef:62:18:b0:f7:8c:0e:07:b9:6b:72: 2c:dd:ef:a7:32:ed:7e:bd:a8:d1:2e:c8:5e:3f:bf: 5a:ab:2a:ae:ca:6d:49:ea:66:9e:26:5b:bc:4d:37: e8:ff:71:93:05:83:c0:a2:81:93:5d:03:a9:7f:6e: 69:e8:7a:fd:27:8c:cc:d2:76:0e:f5:55:e1:66:41: 83:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:13:13:81:A2:05:70:04:1E:FB:AB:5D:7D:17:FF:FE:53:DC:E2 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:26:6f:54:24:fd:e8:7f:42:6a:f8:dd:f2:3e:ce:78:8c:e8: f3:e3:58:07:14:27:3c:32:a4:a2:37:53:01:1a:29:54:32:6b: 4e:f6:c5:c7:4b:6d:dc:cd:01:10:ee:c4:9c:99:0f:36:01:53: bf:43:53:b0:b1:61:cf:52:c2:47:26:a3:d6:89:29:35:c7:30: d9:81:33:49:e6:9a:ca:7c:91:ba:64:d5:3d:c4:a2:fd:ab:56: c0:6e:b6:58:58:02:f1:73:0d:1d:a0:95:77:36:2e:f6:fd:93: 60:b2:5a:c1:f7:ff:04:95:75:69:75:bf:1b:43:d0:55:0f:f9: f0:8c:14:be:e2:25:f9:3f:22:7e:5e:77:c7:fb:2a:5a:ad:ab: 34:41:8e:b0:2f:73:3a:11:94:df:2d:ff:c0:fb:1a:f4:48:7f: 03:bb:b7:7b:18:06:f2:6b:22:6e:ce:86:ec:8b:45:63:b8:b6: 78:9c:1c:cd:2f:f9:26:39:7c:d9:98:a0:82:40:c8:3f:bb:11: 45:8d:e1:6c:86:2c:c3:28:d6:47:57:8e:bb:03:20:11:d2:2a: ca:9b:7b:e6:4c:49:8c:e5:bd:db:ee:ff:1b:82:ca:0f:b9:d0: 18:dd:99:11:9b:09:8b:26:51:18:ab:5d:58:f7:e9:2a:e6:ef: ce:43:18:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuMQfVChLJLJNwQZBg6QhEwegl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNTA1MTAwMDM3MDVaFw0yNTA1MTMwMTA2MDVaMDMxMTAvBgNV BAMTKDY5MDcxMzEzODFBMjA1NzAwNDFFRkJBQjVEN0QxN0ZGRkU1M0RDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5480h6Xn8FHG5LGxvn9EKm2/m bkSpwOgUckP9rXnHI42KZLmBX/Qmdo0eiUFfIKR1t7Ylbpk+S++NOjnxG26MAgrg HQFY5Xx0uwF/ftF9NtYbjdI3zPqqDjmv1iuFYvGhPSw1DO7HS7p73rEQjuBz6o3B z8rzaCIpfMdMLhwxsWT+sX6zKy7PFaufOFpwqZOKCz3l1dfoGNEZ8gCyyFLJKrTb HsaFGF8w80txW3J7tYHjQ8pbH5LvYhiw94wOB7lrcizd76cy7X69qNEuyF4/v1qr Kq7KbUnqZp4mW7xNN+j/cZMFg8CigZNdA6l/bmnoev0njMzSdg71VeFmQYOBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQcTE4GiBXAEHvurXX0X//5T3OIwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0mb1Qk/eh/Qmr43fI+zniM6PPjWAcUJzwy pKI3UwEaKVQya072xcdLbdzNARDuxJyZDzYBU79DU7CxYc9Swkcmo9aJKTXHMNmB M0nmmsp8kbpk1T3Eov2rVsButlhYAvFzDR2glXc2Lvb9k2CyWsH3/wSVdWl1vxtD 0FUP+fCMFL7iJfk/In5ed8f7KlqtqzRBjrAvczoRlN8t/8D7GvRIfwO7t3sYBvJr Im7OhuyLRWO4tnicHM0v+SY5fNmYoIJAyD+7EUWN4WyGLMMo1kdXjrsDIBHSKsqb e+ZMSYzlvdvu/xuCyg+50BjdmRGbCYsmURirXVj36Srm785DGGU= -----END CERTIFICATE-----Generated at Sun May 11 20:15:31 2025 by rpki-client